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Method of securing the recording mode of a home 
automation device 

The invention relates to a method of securing according 
5 to the preamble of claim 1. The invention pertains also 
to a device intended to implement the method according 
to the invention. 

The expression command transmitter is understood to 
10 mean any element capable of transmitting a command by 
any means and in particular by using an electromagnetic 
signal, for example of radiof requency or infrared type, 
or by using an electrical signal. 

15 In devices allowing the driving of comfort and/^r 
security elements, when the command transmitters and 
the command receivers communicate remotely, it is 
necessary to pair them. This pairing is carried out by 
the implementation of a procedure of identification and 

20 of learning of the transmitters, which will be 
associated with the receivers so as to allow the remote 
control of the actuators associated with the receivers. 

Such a procedure is described in patent EP 0 867 848. 

25 The device allowing the implementation of this 
procedure comprises two transmitters each possessing an 
identity number and transmitting a signal comprising 
this number and a command. The device also comprises a 
receiver furnished with a logic unit exhibiting a 

30 microprocessor and a memory. The microprocessor is 
capable of operating according to two modes. A first in 
which it allows the execution of the commands received 
and a second in which it allows the recording of the 
identity numbers of the transmitters. Another procedure 

35 is also known from the document FR 2 727 553. 

A means of switching to learning mode such as a 
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pushbutton situated on the receiver can act directly on 
the microprocessor. This means of switching to learning 
mode of the microprocessor can also be associated with 
a transmitter, so that by means of this transmitter, it 
5 is possible to switch the microprocessor to learning 
mode and to record the identity number of at least one 
other transmitter. In the case of a wireless 
transmitter, the identity number of this transmitter 
must be known to the microprocessor in order to be able 

10 to activate the switching to learning mode. The 
recording into memory of the identity number of the 
transmitter comprising the means of switching to 
learning mode may be performed prior to installation, 
in the factory for example. This recording into memory 

15 (or pairing) may also occur at the time of installation 
by the activation of a function for switching into 
learning mode of the microprocessor at the level of the 
receiver as described previously. This function is no 
longer necessarily accessible once the device has been 

20 completely installed. 

In the case where the means of switching to learning 
mode is accessible solely on a transmitter, problems 
arise upon the loss or theft of this transmitter. On 
25 the one hand, it is no longer possible to associate 
transmitters with or to remove transmitters from the 
device and, on the other hand, in the case of a theft, 
the device is no longer secure. 

30 A easy solution making it possible to solve these 
problems is described in patent EP 0 921 507. It 
consists in ordering the switching into learning mode 
through a specific action on the mains supply, for 
example a double cutout of current within a reduced 

35 time interval. 

This solution makes easier the pairing between 
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transmitters and receivers exhibits a lack of security 
of access to the memory of the receivers. 

Specifically, if one takes the example of a gate or a 
5 garage, far from the main building and the door of 
which is controlled by a remote control system, there 
exist unsecure accessways to the mains supply, between 
the gate or the garage and the main building. These 
accessways may be used to act in a fraudulent manner on 
10 the mains supply, in such a way as to switch the 
receiver of the remote control system to learning mode 
and to pair a new transmitter. 

Another case of unsecure access is the following: 
15 switches are found situated at the level of the 
receiver, in particular in garage door actuator 
systems. An action on this switch activates the 
learning mode of the receiver. In the case of a garage 
door left open temporarily, access to the switch is 
20 unrestricted and the latter can be used for fraudulent 
purposes for the pairing of a new transmitter. 

The methods and the means allowing the switching of the 
device to learning mode according to the prior art are 

2 5 represented in figures 1 and 2. 

In figure 1, the command receiver is initialized upon 
the installation of the device. The initialization 
phase also comprises the procedures for pairing one or 

3 0 more transmitters in the course of which the receiver 

receives the identity number of the transmitter or 
transmitters and stores them in memory. 

To switch the receiver to learning mode, a user 
35 performs, on a transmitter already known by the command 
receiver, an action Al for switching to learning mode, 
for example by pressing a specific button provided on 
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this transmitter. The transmitter generates and sends a 
programming message containing its identity number ID 
and a programming code allowing the switching of the 
receiver to learning mode. 

5 

Upon the reception of the message originating from the 
command transmitter, the receiver checks whether the 
identity number ID received is in memory. If such is 
the case, the command receiver is ready to receive 

10 messages for controlling the actuator from the 
transmitter. In the case where a programming code is 
received, the receiver switches to learning mode. It is 
then possible to pair new transmitters or to remove 
some. Exit from the learning mode follows either the 

15 end of a timeout, or a new order from the user. 

Another procedure for switching to learning mode of the 
receiver, known from the prior art, is represented in 
figure 2. This procedure is initiated by an action A2 
20 of the user on a means of switching to learning mode 
associated directly with the receiver or by a specific 
action on the mains supply. 

A solution proposing to use independent units to 
25 reprogram the system managing the opening of the doors 
of a vehicle is known from patent JP 2001032587. This 
solution is aimed at securing the system with respect 
to the theft of the transmitters, but does not solve 
the problem of access to the fixed means of switching 
3 0 to learning mode in the procedures for pairing between 
transmitters and receivers. 

The aim of the invention is to provide a method making 
it possible to solve the aforesaid problems and to 
35 improve the methods of the prior art. In particular, 
the invention proposes to implement a method making it 
possible to secure access to the learning functions of 
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the command receivers within the framework of devices 
providing for the security and/or the comfort of a 
building- The invention also proposes to embody a 
device making it possible to implement this method, 

5 

The method according to the invention is characterized 
by the characterizing part of claim 1. 

Various modes of execution of this method are defined 
10 by the dependent claims 2 to 7 . 

The independent claim 8 defines a device allowing the 
implementation of this method. 

15 The dependent claims 9 and 10 define modes of 
embodiment of the device according to the invention. 

It is therefore possible to distinguish three types of 
transmitters which may communicate with the command 
20 receiver of the device: 

a simple control transmitter (up/down, 

open/close) , 

a programming transmitter (control and function 
for activating the learning mode of the receiver) , 
25 - a secure command transmitter (optional control, 
functions for activating the learning mode and 
disabling) . 

The two main functions of the secure command 
30 transmitter are therefore the switching into learning 
mode of the receiver and the disabling of the learning 
mode activation functions. These main functions are 
activated either by different actions, or by a common 
action on one or more transmitters having means of 
35 switching to learning mode and means of disabling of 
the activation functions. 
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Preferably, the secure command transmitters comprise 
wireless means of remote communication with the command 
receiver. 

5 The secure command transmitters preferably . have two 
dimensions substantially equal to the standardized 
dimensions of a sheet of paper so as to be able to be 
kept easily in a safe place such as a strongbox. They 
may also be furnished with visual means such as labels 
10 so as to indicate to the user with which devices they 
are associated. 

The device comprises a transmitter whose functions are 
the switching into learning mode of the device and the 
15 sending of a secure code and a receiver such that the 
receiving of the secure code causes the disabling of 
the other means (one or more) of switching to learning 
mode . 

2 0 The device can be used in a preventive manner. Once the 
^ desired pairings between transmitters and receivers 
have been performed, the secure code can be sent to the 
receiver, by virtue of the secure transmitter, in such 
a way as to limit its possibilities of switching into 

25 learning mode. 

The secure transmitter does not necessarily include any 
function for controlling the actuator. In this way, it 
can consist of a simple transmitter, that is cheaper 
30 and easier to house in a safe place. However, provision 
may be made for a secure transmitter associated with a 
more advanced transmitter, which could possibly be 
fixed to the interior of the residence. 

35 The secure transmitter can allow a one-off disabling, 
that is to say an irreversible cancellation of the 
means (one or more) for switching into learning mode. A 
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f unction for reactivating the various means for 
switching into learning mode may also be provided on 
the secure transmitter. In both cases, the secure 
transmitter can be reused for the receiver learning 
5 mode activation function. 

Provision may also be made for a function for erasing 
the identity numbers already recorded, for example by a 
special maneuver on the secure transmitter. 

10 

The appended drawing represents, by way of examples, 
several modes of execution of the method according to 
the invention. 

15 Figure 1 is a flowchart of a method of switching to 
learning mode according to the prior art . 

Figure 2 is a flowchart of another method of switching 
to learning mode according to the prior art . 

20 

Figure 3 is a flowchart of a first mode of execution of 
the method of securing the learning mode upon a first 
use of the secure command transmitter. 

25 Figures 4a and 4b are two parts of a flowchart of a 
second mode of execution of the method of securing the 
learning mode upon a first use of the secure command 
transmitter. 

30 Figure 5 is a flowchart of the first mode of execution 
of the method of securing the learning mode upon a 
subsequent use of the secure command transmitter. 

Figure 6 is a diagram representing a command 
35 transmitter and a command receiver. 
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The device represented in figure 6 allows the 
implementation of the method according to the 
invention. It comprises a command receiver 10 and an 
assembly of command transmitters 20. For simplicity, a 
5 single transmitter has been represented in figure 6. 

The command receiver 10 comprises a receiver module 12 
linked, on the one hand, to a coupling device 11 and, 
on the other hand, to a processing unit 13 of 
10 microcontroller type driving a rig 14 such as a door, a 
rolling shutter or an alarm installation. The . command 
receiver can also comprise a control interface 15 of 
pushbutton type. The command receiver is connected to a 
mains supply 17. 

15 

The processing unit 13 comprises a memory area* 16 
intended to contain programs for operating the receiver 
10 and the identity numbers of the command transmitters 

20 from which the receiver 10 may receive commands. 

20 

Each command transmitter 20 comprises a transmitter 
module 22 linked, on the one hand, to a coupling device 

21 and, on the other hand, to a processing unit 23 of 
microcontroller type, and a control interface 24 of 

25 keypad type. Each command transmitter 20 contains its 
identity number in a memory area 26 of the processing 
unit 23 . 

The command transmitters are able to send commands by 
30 way of electromagnetic waves, of radio type or of 
infrared type or else by way of wire links. 

The communications between command transmitters and 
command receivers may be bidirectional. In this case, 
35 transmitters and receivers are furnished with 
''transmitter/receiver" modules . 
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The command transmitters, or at least some of them, may 
by an action or a series of actions of the user make 
the receiver switch to a learning mode in which it is 
possible to modify the list of the transmitters which 
5 are paired with it through their addition or removal. 

Among the command transmitters, a particular 
transmitter, the so-called secure command transmitter, 
makes it possible to disable certain functions of 
10 switching into learning mode of the receiver. 

Figure 3 represents a first mode of execution of the 
method of operation of the device upon a first use of 
the secure command transmitter. 

15 

The first action consists in switching the receiver 
into learning mode by a command of type Al (by a 
command transmitter) or of type A2 (directly at the 
level of the receiver or on the mains supply) . The user 
20 can then activate a secure program run command A3 which 
causes the sending of a message containing the identity 
number ID of the secure transmitter BPS, so as to pair 
it with the receiver, possibly a programming code and 
the secure programming code . 

25 

The receiver recognizes the identity number ID of the 
transmitter. 

The reception of the secure programming code causes the 
30 running of an associated security program and, 
consequently, the disabling of the means of switching 
into learning mode of type Al and/or of type A2 . 

This disabling of the means of switching into learning 
35 mode may consist of a change of state of binary 
memories associated with the receiver and enabling or 
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otherwise the means of switching into learning mode by 
the various transmitters. 

The receiver can then activate an end-of -procedure 
5 signal informing the user that the means of switching 
into learning mode have been disabled. This signal may 
also be transmitted by the secure command transmitter 
after reception of a message transmitted by the 
receiver, in the case where the communication is 
10 bidirectional. 

In such a mode of execution, the functions for 

switching into learning mode and for disabling may 

either be common to one and the same action on the 
15 secure command transmitter, or differentiated. 

In the first case, the reception of the programming 
code does not affect the receiver which is already in 
learning mode. Possibly, in the case of an end of 
20 learning mode following the end of a timeout, the 
latter may be reinitialized following the reception of 
a programming code by the command receiver. 

In the second case, the programming code is not sent by 
25 the secure command transmitter. 

Figures 4a and 4b represent a second mode of execution 
of the method of operation of the device upon a first 
use of the secure command transmitter, when the 
30 functions of identification of the secure command 
transmitter and the disabling command are decoupled. In 
this case, two specific actions have to be performed on 
the secure command transmitter by the user. These two 
actions may be staggered over time. 

35 

Figure 4a represents the method of pairing the secure 
command transmitter. A first action A4 , performed while 
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the receiver has previously been switched into learning 
mode, makes it possible to pair the secure command 
transmitter and the command receiver. It causes the 
sending solely of the identity number ID of the secure 
5 command transmitter and its reception and its storage 
by the command receiver. 

Figure 4b represents the operation of the secure 
command transmitter once it is known to the receiver, A 

10 second action A5 causes the sending of a message 
containing the identity number ID of the secure command 
transmitter, possibly a programming code and a secure 
programming code. The identity number of the 
transmitter having been recorded in the receiver during 

15 the previous action, the latter is recognized by the 
receiver and the secure programming code is stored in 
memory causing the running of the security program 
associated with this code. The means for switching into 
learning mode of type Al and/or of type A2 are 

2 0 consequently disabled. 

When the functions for switching into learning mode and 
for disabling are common to a type of action on the 
secure command transmitter, the reception of the 

2 5 programming codes brings about in a substantially 

simultaneous manner the switching into learning mode of 
the receiver and the disabling of the learning mode 
activation functions . 

30 In a general manner, the disabling function involves 
the disabling of the learning mode activation 
functions, with the exception of the secure command 
transmitter's learning mode activation function. 

3 5 In the case where the two functions for switching into 

learning mode and disabling have to be activated by two 
differentiated types of action, an action brings about 
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a switching into learning mode of the command receiver, 
in the manner represented in figure 1 and an action 
brings about the sending of the identity number ID of 
the secure command transmitter and of the secure 
5 programming code solely. Thus, only the disabling 
function is activated. 

As in the previous mode of execution, the receiver can 
then activate an end- of -procedure signal informing the 
10 user that the means for switching into learning mode 
have been disabled. This signal may also be transmitted 
by the secure command transmitter after reception of a 
message transmitted by the receiver, in the case where 
the communication is bidirectional. 

15 

There exist several cases for which the secure command 
transmitter is activated although its identity number 
ID is already known to the receiver: 

upon a first use, in the case of figure 4b, if the 
2 0 secure command transmitter has been paired to the 

command receiver without any programming code or 
secure programming code being sent simultaneously, 
or upon a subsequent use of the secure command 
transmitter, for the switching into learning mode 

2 5 of the device, 

or if means are provided for reactivating the 
original means for switching into learning mode. 

Figure 5 represents the method implemented when the 

3 0 command transmitter is known to the receiver, upon a 

subsequent use. Through an action A3 on the secure 
transmitter, the user causes the sending of a message 
containing the identity number ID of the secure command 
transmitter, possibly the programming code, and the 
35 secure programming code. The receiver receives this 
message, recognizes the identity number ID of the 



wo 2004/044863 



13 



PCT/IB2003/005073- 



secure command transmitter and stores the secure 
programming code , 

It is possible to provide a test to ascertain whether 
5 the means for switching into learning mode are enabled 
for example by testing the state of binary memories. If 
the means for switching into learning mode are enabled 
(test positive +) , the receiver disables them before 
recording this configuration. It may possibly then 
10 switch to learning mode. If the means of switching into 
learning mode are already disabled (test negative -) , 
the receiver can then switch to learning mode, in such 
a way as to be able to initiate a pairing procedure. 

15 This test is optional and solely avoids the need to 
resend a disable command to already disabled means for 
switching into learning mode, in particular in the case 
where a single action on the secure command transmitter 
brings about both the switching into learning mode of 

20 the receiver and the disabling of other functions of 
activation of this learning mode. 

Of course, in all the modes of execution of the 
invention, the sending of an identity number may be 
25 replaced by any other identification process, such as 
for example a Challenge process. 

Likewise, provision may also be made for the secure 
programming code to be replaced by a generic part of 
30 the identity number of a secure command transmitter, 
which characterizes the secure command transmitter and 
the associated disabling function. 



